In a Review of an Electronic Data Interchange Application Using

In a review of an electronic data interchange application using a third-party service provider, the auditor should:

A) Ensure encryption keys meet International Organization for Standardization (ISO) standards. II. Determine whether an independent review of the service provider's operation has been conducted. III. Verify that only public-switched data networks are used by the service provider. IV. Verify that the service provider's contracts include necessary clauses, such as the right to audit.
B) I and II only
C) I and IV only
D) II and III only
E) II and IV only